Penetration Tester Engineer

SSD is seeking a Penetration Tester Engineer

To succeed in this role the candidate will possess breadth and depth of knowledge in security of operating systems, networking and protocols, firewalls, databases and middleware applications, forensics, scripting, and programming.

Responsibilities include:

• Engagement in all phases of Red Team security operations

• Explore novel techniques for automating reverse engineering and exploit development

• Work within the Red Team to perform physical exploitation, network exploitation and social engineering assessments against authorized targets

• Perform network reconnaissance and open-source intelligence gathering

• Configure and safely utilize attack tools, tactics, and procedures against authorized targets

• Develop scripts, tools, or methodologies to enhance red team capabilities

• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel

Qualifications:

• Bachelors’ Degree or industry equivalent work experience in IT, Computer Engineering, or a similar field

• Relevant, recent, and verifiable experience in information security and adversary simulation (HTB, THM, SANS Hackfest, CTFs, NCL, Codebreaker, GitHub Repo)

• Detailed knowledge of global cyber threats, threat actors, and the tactics, techniques and procedures used by cyber adversaries

• Industry certifications such as (but not limited to): o OSEE (Offensive Security Exploitation Expert)

o OSCP (Offensive Security Certified Professional)

o GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)

o GPEN (GIAC Certified Penetration Tester)

o LPT (Licensed Penetration Tester)

• 3+ years experience in two or more of the following areas:

• Network penetration testing and manipulation of network infrastructure

• Web application penetration testing assessments

• Developing, extending, or modifying exploits, shell code or exploit tools

• Experience with Red, Blue, or Purple teaming exercises